feat(docker): guide clone installation and validate paired update artifacts

Dockerfile

@@ -27,6 +27,8 @@ RUN --mount=type=cache,target=/pnpm \
 RUN --mount=type=cache,target=/pnpm \
     pnpm install --frozen-lockfile --ignore-scripts --offline
 COPY . .
+ARG NEXT_DEPLOYMENT_ID="unknown"
+LABEL org.opencontainers.image.revision="$NEXT_DEPLOYMENT_ID"
 FROM migrations AS builder
 ARG NEXT_DEPLOYMENT_ID="unknown"
 ENV NEXT_DEPLOYMENT_ID="$NEXT_DEPLOYMENT_ID"